Authorizing a mobile node for service

• US 20060239235A1
• Filed: 04/25/2005
• Published: 10/26/2006
• Est. Priority Date: 04/25/2005
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Malaviya, Viren K., Oswal, Anand K., Waclawsky, John G.
• Granted Patent: US 7,496,346 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/147 Signalling methods or messages providing extensions to protocols defined by standardisation
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Authorizing a mobile node for a service includes receiving at an enforcement point a session initiation invitation from the mobile node. The session initiation invitation comprises an authorization token and a session initiation object. Whether the mobile node is authorized to access a service is determined in accordance with the authorization token. The authorization token is sent to an authorization server if the mobile node is authorized to access the service. The session initiation object is sent to a server to initiate the service if the mobile node is authorized to access the service.

Claims

1. A method for authorizing a mobile node for a service, comprising:

receiving at an enforcement point a session initiation invitation from a mobile node, the session initiation invitation comprising an authorization token and a session initiation object;

determining whether the mobile node is authorized to access a service in accordance with the authorization token;

sending the authorization token to an authorization server if the mobile node is authorized to access the service; and

sending the session initiation object to a server to initiate the service if the mobile node is authorized to access the service.

2. The method of claim 1, wherein:

the session initiation invitation comprises a session initiation protocol invitation; and

the authorization token comprises a session initiation protocol object.

3. The method of claim 1, further comprising:

monitoring consumption of the service by the mobile node; and

establishing whether the consumption conforms to one or more consumption constraints of the authorization token.

4. The method of claim 1, wherein:

the mobile node comprises the enforcement point.

5. The method of claim 1, wherein:

the enforcement point is distinct from the mobile node.

6. An enforcement point operable to facilitate authorization of a mobile node for a service, comprising:

an interface operable to;

receive a session initiation invitation from a mobile node, the session initiation invitation comprising an authorization token and a session initiation object; and

a processor coupled to the interface and operable to;

determine whether the mobile node is authorized to access a service in accordance with the authorization token;

send the authorization token to an authorization server if the mobile node is authorized to access the service; and

send the session initiation object to a server to initiate the service if the mobile node is authorized to access the service.

7. The enforcement point of claim 6, wherein:

the session initiation invitation comprises a session initiation protocol invitation; and

the authorization token comprises a session initiation protocol object.

8. The enforcement point of claim 6, wherein the processor is further operable to:

monitor consumption of the service by the mobile node; and

establish whether the consumption conforms to one or more consumption constraints of the authorization token.

9. The enforcement point of claim 6, wherein:

the mobile node comprises the enforcement point.

10. The enforcement point of claim 6, wherein:

the enforcement point is distinct from the mobile node.

11. The enforcement point of claim 6, wherein:

the session initiation invitation comprises a session initiation protocol invitation;

the authorization token comprises a session initiation protocol object;

the processor is further operable to;

monitor consumption of the service by the mobile node; and

establish whether the consumption conforms to one or more consumption constraints of the authorization token; and

the mobile node comprises the enforcement point.

12. A system for authorizing a mobile node for a service, comprising:

means for receiving at an enforcement point a session initiation invitation from a mobile node, the session initiation invitation comprising an authorization token and a session initiation object;

means for determining whether the mobile node is authorized to access a service in accordance with the authorization token;

means for sending the authorization token to an authorization server if the mobile node is authorized to access the service; and

means for sending the session initiation object to a server to initiate the service if the mobile node is authorized to access the service.

13. A method for authorizing a mobile node for a service, comprising:

requesting pre-authorization for a service for a communication session for a mobile node;

receiving an authorization token indicating pre-authorization of the mobile node;

inserting the authorization token as an object into a session initiation invitation; and

sending the session initiation invitation to initiate the service for the communication session.

14. The method of claim 13, wherein:

the session initiation invitation comprises a session initiation protocol invitation; and

the authorization token comprises a session initiation protocol object.

15. The method of claim 13, wherein inserting the authorization token further comprises:

inserting the authorization token at a subscriber identity module.

16. A mobile node operable to facilitate authorization for a service, comprising:

an interface operable to;

send a request for pre-authorization for a service for a communication session for the mobile node; and

receive an authorization token indicating pre-authorization of the mobile node; and

a processor coupled to the interface and operable to;

insert the authorization token as an object into a session initiation invitation; and

the interface further operable to;

send the session initiation invitation to initiate the service for the communication session.

17. The mobile node of claim 16, wherein:

the session initiation invitation comprises a session initiation protocol invitation; and

the authorization token comprises a session initiation protocol object.

18. The mobile node of claim 16, wherein the processor is further operable to insert the authorization token by:

inserting the authorization token at a subscriber identity module.

19. The mobile node of claim 16, wherein:

the session initiation invitation comprises a session initiation protocol invitation;

the authorization token comprises a session initiation protocol object; and

the processor is further operable to insert the authorization token by;

inserting the authorization token at a subscriber identity module.

20. A system for authorizing a mobile node for a service, comprising:

means for requesting pre-authorization for a service for a communication session for a mobile node;

means for receiving an authorization token indicating pre-authorization of the mobile node;

means for inserting the authorization token as an object into a session initiation invitation; and

means for sending the session initiation invitation to initiate the service for the communication session.

21. A network for authorizing a mobile node for a service, comprising:

a mobile node operable to;

send a request for pre-authorization for a service for a communication session for the mobile node;

receive an authorization token indicating pre-authorization of the mobile node;

insert the authorization token as an object into a session initiation invitation comprising a session initiation object; and

an enforcement point operable to;

receive the session initiation invitation from the mobile node;

determine whether the mobile node is authorized to access a service in accordance with the authorization token;

send the authorization token to an authorization server if the mobile node is authorized to access the service; and

send the session initiation object to a server to initiate the service if the mobile node is authorized to access the service.

22. The network claim 21, wherein:

the session initiation invitation comprises a session initiation protocol invitation; and

the authorization token comprises a session initiation protocol object.

23. The network claim 21, wherein the enforcement point is further operable to:

monitor consumption of the service by the mobile node; and

establish whether the consumption conforms to one or more consumption constraints of the authorization token.

24. The network claim 21, wherein:

the mobile node comprises the enforcement point.

25. The network claim 21, wherein:

the enforcement point is distinct from the mobile node.

26. The network claim 21, wherein the mobile node is further operable to insert the authorization token by:

inserting the authorization token at a subscriber identity module.

27. The network claim 21, wherein:

the session initiation invitation comprises a session initiation protocol invitation;

the authorization token comprises a session initiation protocol object;

the enforcement point is further operable to;

monitor consumption of the service by the mobile node; and

establish whether the consumption conforms to one or more consumption constraints of the authorization token;

the mobile node comprises the enforcement point; and

the mobile node is further operable to insert the authorization token by;

inserting the authorization token at a subscriber identity module.